---
id: "CVE-2026-110016"
page: "https://infrastack.ai/live/CVE-2026-110016"
kind: "vulnerability"
aliases: ["CVE-2026-110016"]
title: "WordPress Data Tables Generator plugin lets anonymous visitors read any table"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "self-hosted", "wordpress"]
not_affected_if: ["plugin-not-installed", "version-1.15.8-or-later"]
published_at: "2026-11-11T06:17:11+00:00"
first_seen_at: "2026-11-11T06:25:40+00:00"
updated_at: "2026-11-11T06:27:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110016", "first_seen_at": "2026-11-11T06:25:40+00:00"}]
exploit_sources: []
---

# WordPress Data Tables Generator plugin lets anonymous visitors read any table

Link for people: https://infrastack.ai/live/CVE-2026-110016 (this .md is for agents)

The Data Tables Generator by Supsystic WordPress plugin returns the stored contents of any table to unauthenticated users who know its identifier. The only check is a nonce that every anonymous visitor can see, so tables never published on the site can also be read.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed plugin version in the WordPress admin under Plugins; the flaw affects versions before `1.15.8`.

## Fix

- Data Tables Generator by Supsystic: move to `1.15.8` or later.

## Timeline

- 2026-11-11T06:25:40+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110016

## From the sources

The Data Tables Generator by Supsystic  WordPress plugin before 1.15.8 does not perform any authorization or ownership check before returning the stored contents of a table, relying only on a nonce that is exposed to every anonymous visitor, allowing unauthenticated users to read the full contents of any table by its identifier, including tables that are never published anywhere on the site.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_